SECURITY TOOL
TOTP (2FA) Code Generator
Generate the same rotating codes as an authenticator app, from a Base32 secret.
The Base32 secret shown when an app or site sets up two-factor authentication — usually under a "can't scan the QR code?" link.
Current code
—
About this tool
Generates the same rotating 6- or 8-digit codes as an authenticator app (Google Authenticator, Authy, 1Password, and similar), using the standard TOTP algorithm (RFC 6238) from a Base32 secret key — the kind shown when setting up two-factor authentication on an account.
The code regenerates automatically every 30 seconds, matching the countdown bar above. Everything is computed locally in your browser; the secret is never sent anywhere.
Frequently asked questions
- Where do I get the secret key?
- When enabling two-factor authentication, most services show a QR code plus a text alternative — usually behind a link like "can't scan this?" or "enter key manually." That text string is the Base32 secret this tool needs.
- Is it safe to use this instead of my phone's authenticator app?
- Functionally it computes the identical code, but storing a 2FA secret in a browser tool defeats much of the security benefit of having a separate authentication factor — a dedicated authenticator app or hardware key is the safer place to keep it long-term. This is better suited to testing your own setup than to everyday use.
- Why do some services use 8-digit codes?
- Most consumer services use 6 digits, but some systems (following stricter standards) issue 8-digit codes for a larger code space — same algorithm, just more digits kept from the calculation.